Wisdom

Per-request API keys defeat caching

Quote

if you have to have an API key, you're changing the request metadata,

Episode 84: All Aboard to On-Board! (episode page, opens in a new tab) 01:50:50 (play audio from this timestamp, opens in a new tab)

Voice-matched

Summary

Arguing for opening some Podcast Index endpoints without API keys, Dave notes that signed per-request metadata makes every call look unique to caching proxies like Cloudflare, so nothing can be cached. Keyless endpoints are cacheable and simpler for app developers.

Also said

  1. Episode 84: All Aboard to On-Board! (episode page, opens in a new tab) 01:50:58 (play audio from this timestamp, opens in a new tab)

    And so it all looks to the caching proxies, as if they're, they're calls that can't be that can't be cached, can't be duplicated.

    Voice-matched